Tsk recover

From SleuthKitWiki
Jump to: navigation, search

Back to Help Documents

tsk_recover will extract the unallocated (or allocated) files from an image and save them to a local directory. This is useful if you deleted a bunch of files and want to recover them to a folder.